Originally posted by S Hasan: Can a method exposed as a webservice set and get attributes to/from session? Can a method exposed as a webservice get request parameters?
You can if the endpoint is implemented as a servlet. However if you do, you are breaking the rules for SOAP web services. Any information between the initial sender and ultimate receiver is supposed to be inside the SOAP envelope. HTTP session and HTTP attributes are part of the HTTP request/response that carry the SOAP envelope. Therefore all the information in the HTTP request/response other than the SOAP envelope is strictly off limits.